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application: 



LISTING OF CLAIMS: 

1 . (Currently Amended) A method for generating a shared key comprising: 
providing a first certificate from a first peer to a second peer, the first certificate 

including a plurality of first parameters, the first peer and second peer being 
communicated over a network; 

performing a first exponentiation operation to generate a first public key from 
the second peer using at least one parameter of the plurality of first parameters and a 
first private key from the second peer, wherein the first parameters being digital 
signature standard parameters; 

providing a second certificate and the first public key from the second peer to 
the first peer, the second certificate comprising a plurality of second parameters , the 
first and second certificates being PSA tvpe certificates : 

performing a second exponentiation operation to generate a shared secret key 
for the second peer using at least one parameter from the plurality of first 
parameters; and 

performing a third exponentiation operation to generate the shared secret key 
for the first peer using the first public key from the second peer and a private key 
from the first peer. 

2. (Cancelled) 

3. (Original) The method according to claim 2 wherein the first and second 
parameters comprise a prime number Pdss. a prime number qdss, ^ generator gdss and 
a public key for the first and second peers, respectively. 
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4. (Original) Tlie method according to claim 3 wherein the first exponentiation 
operation to generate the first public key is Yr = gdss ^ Xr mod Pdss where Xr is a one- 
time private key from the second peer. 

5. (Original) The method according to claim 4 wherein the second exponentiation 
operation to generate the shared secret key for the second peer is Yssk = YacIss ^ Xr 
mod Pdss where YacJss is a DSS public key from certificate of peer A. 

6. (Original) The method according to claim 5 wherein YAdss = 9dss ^ XAdss nriod Pdss 
where XAdss is a DSS private key from certificate of peer A. 

7. (Original) The method according to claim 5 wherein the third exponentiation 
operation to generate the shared secret key for the first peer is Yssk = Yr XAdss 
mod Pdss where XAdss is a DSS private key from certificate of peer A. 

8. (Original) The method according to claim 1 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

9. (Currently Amended) An article of manufacture comprising: 

a machine accessible medium including data that, when accessed by a 
machine, causes the machine to perform operations comprising: 

providing a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters; 

performing a first exponentiation operation to generate a first public key from 
the second peer using the plurality of first parameters and the first private key from 
the second peer, wherein the first parameters being digital signature standard 
parameters; 
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providing a second certificate and the first public key from the second peer to 
the first peer, the second certificate comprising a plurality of second parameters^Jhe 
first and second certificates being PSA type certificates : 

performing a second exponentiation operation to generate a shared secret key 
for the second peer using at least one parameter from the plurality of first 
parameters; and 

performing a third exponenfiation operation to generate the shared secret key 
for the first peer using the first public key from the second peer and a private key 
from the first peer. 

10. (Cancelled) 

1 1 . (Original) The article of manufacture according to claim 10 wherein the first and 
second parameters comprise a prime number Pdss. a prime number qdss. a generator 
gdss and a public key for the first and second peers, respectively. 

12. (Original) The article of manufacture according to claim 11 wherein the first 
exponentiation operation to generate the first public key is Yr = gdss ^ Xr mod Pdss 
where Xr is a one-time private key from the second peer. 

13. (Original) The article of manufacture according to claim 12 wherein the second 
exponentiation operation to generate the shared secret key for the second peer is 
YssK = YAdss ^ Xr mod Pdss where YAdss is a DSS public key from certificate of peer 
A. 

14. (Original) The article of manufacture according to claim 13 wherein YAdss = Qdss ^ 
XAdss rriod Pdss where XAdss is a DSS private key from certificate of peer A. 
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15. (Original) Ti^e article of manufacture according to claim 13 wherein the third 
exponentiation operation to generate the shared secret key for the first peer Is Yssk = 
Yr ^ XAdss nriod Pdss where XacIss is a DSS private key from certificate of peer A. 

16. (Original) The article of manufacture according to claim 9 wherein the first and 
second certificates are sent to the second and first peers, respectively, over a 
wireless network. 

1 7. (Currently Amended) A system comprising: 

a processor; and 

a memory coupled to the processor, the memory containing program code 
that, when executed by the processor, causes the processor to: 

provide a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters, the first peer and second peer being 
communicated over a network; 

perform a first exponentiation operation to generate a first public key from the 
second peer using the plurality of first parameters and the first private key from the 
second peer; the second parameters being digital signature standard parameters; 

provide a second certificate and the first public key from the second peer to 
the first peer; the second certificate comprising a plurality of second parameters , the 
first and second certificates being PSA type certificates : 

perform a second exponentiation operation to generate a shared secret key for 
the second peer using at least one parameter from the plurality of first parameters; 
and 

performing a third exponentiation operation to generate the shared secret key 
for the first peer using the first public key from the second peer and a private key 
from the first peer. 

18. (Cancelled) 
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19. (Original) The system according to claim 18 wherein the first and second 
parameters comprise a prime number Pdss» ^ prime number q^ss. ^ generator gdss and 
a public key for the first and second peers, respectively. 

20. (Original) The system according to claim 19 wherein the first exponentiation 
operation to generate the first public key is Yr = gdss ^ Xr mod Pdss where Xr is a 
one-time private key from the second peer. 

21. (Original) The system according to claim 20 wherein the second exponentiation 
operation to generate the shared secret key for the second peer is Yssk = YAdss ^ Xr 
mod Pdss where YacJss is a DSS public key from certificate of peer A. 

22. (Original) The system according to claim 21 wherein YAdss = Qdss ^ XAdss where 
XAdss is a DSS private key from certificate of peer A. 

23. (Original) The system according to claim 21 wherein the third exponentiation 
operation to generate the shared secret key for the first peer is Yssk = Yr XAdss 
mod Pdss where XAdss is a DSS private key from certificate of peer A. 

24. (Original) The system according to claim 17 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

25. (Currently Amended) A method comprising: 

receiving by a second peer a first certificate of a first peer including a plurality 
first parameters, the first peer and second peer being communicated over a network; 

performing a first exponentiation operation to generate a first public key using 

at least one parameter of the plurality of first parameters and a first private key; the 

second parameters being digital signature standard parameters; 
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receiving a second certificate and the first public key, the second certificate 
including a plurality of second parameter s, the first and second certificates being 
PSA type certificates : 

performing a second exponentiation operation to generate a first shared secret 
key using at least one parameter from the plurality of first parameters; and 

performing a third exponentiation operation to generate a second shared 
secret key using the first public key and a private key. 



26. (Cancelled) 

27. (Original) The method according to claim 26 wherein the first and second 
parameters each comprises a prime number Pdss. a prime number qdss. a generator 
gdss snd a public key. 

28. (Original) The method according to claim 27 wherein the first exponentiation 
operation to generate the first public key is Yr = gdss ^ Xr mod Pdss where Xr is a one- 
time private key. 

29. (Original) The method according to claim 28 wherein the second 
exponentiation operation to generate the first shared secret key for the second peer 

is YssK = YAdss ^ Xr mod Pdss where YAdss is a DSS public key. 

30. (Original) The method according to claim 29 wherein YAdss = 9dss ^ XAdss nnod 
Pdss where XAdss is a DSS private key. 

31. (Original) The method according to claim 29 wherein the third exponentiation 
operation to generate a second shared secret key is Yssk = Yr ^ XAdss nnod Pdss 
where XAdss is a DSS private key. 
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32. (Original) The method according to claim 25 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

33. (Previously presented) The method according to claim 1 wherein the network 
be one of a wireless network and a Bluetooth network. 

34. (Previously presented) The system according to claim 17 wherein the network 
be one of a wireless network and a Bluetooth network. 

35. (Previously presented) The method according to claim 24 wherein the network 
be one of a wireless network and a Bluetooth network. 
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